PunchClock 2.0.3

Full Changelog: v2.0.2...v2.0.3

A new app icon, and a way back into PunchClock when the only admin forgets their password. The database and the switchover tools are the same as in 2.0.2, so 2.0.3 installs over 2.0.2, keeps all data and is equally safe for the switchover.

Features Added:

• New PunchClock icon: a clock with a time card, so the app is easy to spot. It appears on the desktop and Start menu shortcuts, the taskbar, every window's title bar, the import tool and the setup program
• Forgot password on the Admin sign-in window. Another admin can still reset a forgotten password from Accounts; when no admin can sign in, PunchClock shows a recovery challenge, the site owner signs it with their owner key on their own computer, and the response lets the kiosk set a temporary password once. The account's owner must choose a new password at their next sign-in, and its sign-in lockout is cleared
• Being at the kiosk PC is not enough to recover an account: the owner key never leaves the owner's computer, and each challenge works once, for 60 minutes
• Every recovery is kept in the audit log: which account, when, on which PC, the challenge, the owner key's fingerprint and the reason given
• PunchClock.OwnerKey, the owner's tool that makes the key and signs challenges (not part of the installer)

Moving from the old PunchClock app (v1.x)? Follow the switchover steps in the README before anyone punches in the new app.

File	Use
PunchClock-Setup-2.0.3.exe	Installer. Includes the export and import tools for the switchover.
SHA256SUMS.txt	Checksum of the installer.

The installer is not code-signed yet, so Windows SmartScreen asks for confirmation: click More info, then Run anyway.